Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-5720 | critical | 9.1 | No | miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remote attackers to cause a denial of service... | 2026-10-26 |
| CVE-2026-33689 | critical | 9.1 | No | xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds read vulnerability in the pre-authentication RDP message pa... | 2026-10-26 |
| CVE-2026-33516 | critical | 9.1 | No | xrdp is an open source RDP server. Versions through 0.10.5 contain an out-of-bounds read vulnerability during the RDP capability exchange ph... | 2026-10-26 |
| CVE-2026-40518 | critical | 9.1 | No | ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent cre... | 2026-10-26 |
| CVE-2026-27820 | critical | 9.8 | No | zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a b... | 2026-10-26 |
| CVE-2026-5189 | critical | 9.8 | No | CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker... | 2026-10-26 |
| CVE-2026-27303 | critical | 9.6 | No | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbi... | 2026-10-26 |
| CVE-2026-27245 | critical | 9.3 | No | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exp... | 2026-10-26 |
| CVE-2026-27243 | critical | 9.3 | No | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exp... | 2026-10-26 |
| CVE-2026-2332 | critical | 9.1 | No | In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techn... | 2026-10-26 |
| CVE-2026-0234 | critical | 9.1 | No | An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Mi... | 2026-10-26 |
| CVE-2026-34865 | critical | 9.1 | No | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confi... | 2026-10-26 |
| CVE-2026-25209 | critical | 9.1 | No | Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc5... | 2026-10-26 |
| CVE-2026-25207 | critical | 9.8 | No | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b... | 2026-10-26 |
| CVE-2026-25206 | critical | 9.1 | No | Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc5... | 2026-10-26 |
| CVE-2026-25205 | critical | 9.8 | No | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash... | 2026-10-26 |
| CVE-2026-40393 | critical | 9.8 | No | In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depen... | 2026-10-26 |
| CVE-2026-6110 | critical | 9.8 | No | A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the function generate_thoughts of the file metagpt/stra... | 2026-10-26 |
| CVE-2026-40190 | critical | 9.8 | No | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.5.18, the LangSmith JavaScript/TypeScript SDK (l... | 2026-10-26 |
| CVE-2026-33707 | critical | 9.8 | No | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, the default password reset mechanism generates tokens using sh... | 2026-10-26 |